Everything you need to know about Spin the Wheel.
crypto.getRandomValues(), the cryptographically secure random number generator built directly into every modern web browser. Unlike software-only random number generators, this API draws from multiple high-entropy hardware sources: CPU timing jitter, thermal noise readings, and hardware interrupt timings — combined and processed by the operating system before reaching your browser, producing a stream of numbers that cannot be predicted or reproduced.
Math.random() is a pseudo-random number generator (PRNG). It uses a deterministic algorithm — typically xorshift128+ or a similar method — to produce numbers that appear random but are computed from an internal seed value. Because the algorithm is deterministic, anyone who recovers that seed can predict every subsequent output. Security researchers have demonstrated this: V8's internal PRNG state has been reconstructed in practice, allowing future Math.random() calls to be predicted from a handful of observed values.
crypto.getRandomValues() sidesteps this entirely. It draws from a cryptographically secure source seeded with real-world entropy — hardware noise, interrupt timings, and OS-level unpredictability — that cannot be reverse-engineered from its outputs. The result is unpredictability by design, not just by appearance. That distinction matters most when something of real value is at stake — a giveaway prize, a classroom decision, a fair team selection where outcomes affect real people.crypto.getRandomValues() is mapped uniformly across all possible landing angles. Each entry receives an exactly equal share of the probability space — no weighting, no boosting, no hidden bias in favour of any particular name.
crypto.getRandomValues() function used for real spins, so the output reflects genuine statistical behaviour — not a simplified demo model.
localStorage, sessionStorage, IndexedDB, or cookies to persist your names between visits. If you want to save a list, copy it to a text file on your own device. The only third-party scripts on the page are Google AdSense and Google Fonts — neither service receives your wheel entries.